puffyCid / artemis

A cross platform forensic parser written in Rust!
MIT License
59 stars 6 forks source link

Support for acquiring files #132

Closed puffyCid closed 2 months ago

puffyCid commented 3 months ago

What new feature do you think would be cool to add to artemis? Add an option to acquire files from a system

Describe the solution you'd like Currently artemis supports parsing lots of different files. Though sometimes a user may want to acquire a file and review it locally. Artemis should support acquiring files and either uploading them to cloud services or copy to external device

Additional context One minor complexity is how to handle large files. We don't want to copy a 100GB file and blindly try outputting the file locally and take up all space.

In addition, artemis should support acquiring files using both OS APIs and raw NTFS access